漏洞信息
尽管我们使用了先进的大模型技术,但其输出仍可能包含不准确或过时的信息。神龙努力确保数据的准确性,但请您根据实际情况进行核实和判断。
漏洞
N/A
漏洞信息
tools/url_handler.pl in TIN 2.4.1 does not validate strings before launching the program specified by the BROWSER environment variable, which might allow remote attackers to conduct argument-injection attacks via a crafted URL. NOTE: a third party has reported that this is intentional behavior, because the documentation states "url_handler.pl was designed to work together with tin which only issues shell escaped absolute URLs.
漏洞信息
N/A
漏洞
N/A
漏洞
TIN 安全漏洞
漏洞信息
TIN是一款Usenet(互联网交流系统)全屏新闻阅读器。 TIN 2.4.1版本中的tools/url_handler.pl文件存在安全漏洞,该漏洞源于程序在启动程序之前,没有验证字符串。远程攻击者可借助特制的URL利用该漏洞实施参数注入攻击。
漏洞信息
N/A
漏洞
N/A